16 ms·
Well… linux already has similar ability to do that. They are apparmor and seccomp. The apparmor can limit file system access. And the seccomp limit system cal
by mmis1000 7y ago
Well… linux already has similar ability to do that.
They are apparmor and seccomp.
The apparmor can limit file system access.
And the seccomp limit system call.
But the apparmor requires root and can't be trigger from process itself.
And the seccomp requires you to handwriting filter chain that I believe most people can't do.
- Accujack 7y agoRight, that's what I mean by "inherent". When all OSs include features like this and all applications know about them, security and malware immunity will be much improved. Linux is usually out front in getting OS features in place, but that's just the OS part, not the application software. Windows and the Android version of the Linux kernel (and all android apps) really need this feature too.